This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/323830333a386361303a373030303a3a2f33362d3336203d3e20323636383332.roa File: 323830333a386361303a373030303a3a2f33362d3336203d3e20323636383332.roa (raw, json) Hash identifier: /6pbklhpF5ieJpHmq/yx3nXgyeZxPIm4Oacg7Nh0jF4= Subject key identifier: D2:1D:08:88:47:75:97:50:6D:02:2C:40:5A:1D:D3:D3:02:6B:E8:91 Certificate issuer: /CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54 Certificate serial: 0D467B624F1DCAAAE82E1C55A7297AFB19C1B787 Authority key identifier: CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/323830333a386361303a373030303a3a2f33362d3336203d3e20323636383332.roa Signing time: Fri 26 Dec 2025 17:56:09 +0000 ROA not before: Fri 26 Dec 2025 17:51:09 +0000 ROA not after: Fri 25 Dec 2026 17:56:09 +0000 asID: 266832 IP address blocks: 2803:8ca0:7000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.crl rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:46:7b:62:4f:1d:ca:aa:e8:2e:1c:55:a7:29:7a:fb:19:c1:b7:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54 Validity Not Before: Dec 26 17:51:09 2025 GMT Not After : Dec 25 17:56:09 2026 GMT Subject: CN=D21D0888477597506D022C405A1DD3D3026BE891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:dc:57:c2:de:70:a5:48:a0:af:64:57:c8:82: 17:70:72:2f:41:0a:09:98:df:0a:1f:74:e5:35:fd: c1:6a:f8:81:03:db:a5:3f:29:d3:e0:56:d9:9f:a0: 1b:ce:90:86:1d:9e:68:4c:78:f5:05:09:6d:7d:a9: 95:63:fb:35:db:19:2d:66:c9:27:11:38:fb:09:6e: 77:c9:8c:d5:9e:86:af:c1:90:5c:ad:21:a7:95:cb: 2f:14:51:a7:b2:33:b9:16:b4:fb:30:a8:a9:f6:79: 98:cf:47:ef:fc:e6:7a:31:4f:79:4a:44:ed:3c:de: 83:6f:74:2c:d4:01:1f:73:14:c7:66:6c:6a:79:e6: bc:01:3c:9b:5a:4b:94:6c:28:a7:cf:01:79:7a:63: 95:f5:36:8a:94:b6:95:80:ef:31:4a:b1:55:5d:7e: fa:7f:4f:2d:ab:31:6a:25:7d:94:7f:16:04:10:eb: f8:ed:6b:63:63:1e:33:d1:ff:40:10:03:6a:fb:b5: f0:7f:1c:81:bd:ac:4a:94:60:35:d9:11:06:b5:3f: bd:5e:15:77:3a:bc:ad:3f:52:60:83:14:c7:8f:01: aa:bb:49:98:2a:f7:67:f1:fb:4f:05:4a:e7:96:25: a1:0c:19:66:c8:05:7b:91:d5:09:bf:49:6f:0e:fc: 00:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:1D:08:88:47:75:97:50:6D:02:2C:40:5A:1D:D3:D3:02:6B:E8:91 X509v3 Authority Key Identifier: keyid:CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/323830333a386361303a373030303a3a2f33362d3336203d3e20323636383332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:8ca0:7000::/36 Signature Algorithm: sha256WithRSAEncryption bb:b2:14:c8:e1:73:37:af:88:0b:bc:0d:7c:8c:b0:ba:84:9f: 7e:b9:c9:3b:f6:f6:fb:66:b0:a1:e2:5b:d0:a3:5c:c1:d2:41: fe:27:b7:f4:08:9b:a0:16:6a:cb:07:f2:09:ee:24:68:d5:04: b7:7a:04:57:1f:50:6a:f6:47:91:ac:c4:4f:b1:3a:e7:83:89: eb:9d:a5:76:3b:2b:43:fe:f5:cd:c8:86:f0:e3:f7:42:a3:e2: c1:5f:16:98:05:ea:c8:a9:8b:88:fa:2f:58:0b:65:ba:87:b2: a4:24:ca:da:71:48:8f:15:c0:aa:da:bb:fb:98:13:98:14:a0: 69:8e:b5:b3:25:f5:b8:b0:c7:77:01:e9:c7:c1:fc:94:33:ba: 37:2a:18:5d:41:45:01:83:8c:ec:d9:65:f0:d9:fa:5b:79:1f: f0:84:fa:94:4b:16:21:14:d8:02:52:09:2e:76:4e:d8:e3:cb: 2d:8c:59:57:24:c7:78:b3:29:07:07:be:72:88:96:02:c3:83: 0d:64:cd:9d:72:87:7f:99:ed:1e:88:cc:55:80:a8:c8:35:94: dd:a6:ca:cf:ff:6d:6f:9c:ba:96:9c:e6:5e:60:70:b8:27:39: 56:aa:00:48:c9:1e:14:16:23:47:8f:b5:0d:35:d7:4e:fe:0c: 1d:92:8f:50 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUDUZ7Yk8dyqroLhxVpyl6+xnBt4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1MUNGMjVBRTY4RjBDODU4RkVCNTFGRjcyRDk2NEJF NTY4QUE1NDAeFw0yNTEyMjYxNzUxMDlaFw0yNjEyMjUxNzU2MDlaMDMxMTAvBgNV BAMTKEQyMUQwODg4NDc3NTk3NTA2RDAyMkM0MDVBMUREM0QzMDI2QkU4OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr3FfC3nClSKCvZFfIghdwci9B CgmY3wofdOU1/cFq+IED26U/KdPgVtmfoBvOkIYdnmhMePUFCW19qZVj+zXbGS1m yScROPsJbnfJjNWehq/BkFytIaeVyy8UUaeyM7kWtPswqKn2eZjPR+/85noxT3lK RO083oNvdCzUAR9zFMdmbGp55rwBPJtaS5RsKKfPAXl6Y5X1NoqUtpWA7zFKsVVd fvp/Ty2rMWolfZR/FgQQ6/jta2NjHjPR/0AQA2r7tfB/HIG9rEqUYDXZEQa1P71e FXc6vK0/UmCDFMePAaq7SZgq92fx+08FSueWJaEMGWbIBXuR1Qm/SW8O/ADfAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQU0h0IiEd1l1BtAixAWh3T0wJr6JEwHwYDVR0j BBgwFoAUy1HPJa5o8MhY/rUf9y2WS+VoqlQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zMENDOEU5MjhDRUZEMDM0MTEwMjNDMEVERTY4OUQxQjdC Nzk2MzY0MjAxQzJBQzlCOTlFNTE1QjgzQTdGNzRELzAvQ0I1MUNGMjVBRTY4RjBD ODU4RkVCNTFGRjcyRDk2NEJFNTY4QUE1NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQjUxQ0YyNUFFNjhGMEM4NThG RUI1MUZGNzJEOTY0QkU1NjhBQTU0LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzBDQzhFOTI4Q0VGRDAzNDExMDIzQzBFREU2ODlEMUI3Qjc5NjM2NDIw MUMyQUM5Qjk5RTUxNUI4M0E3Rjc0RC8wLzMyMzgzMDMzM2EzODYzNjEzMDNhMzcz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzYzODMzMzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA4ygcDANBgkqhkiG9w0BAQsFAAOCAQEAu7IUyOFzN6+IC7wNfIywuoSf frnJO/b2+2awoeJb0KNcwdJB/ie39AiboBZqywfyCe4kaNUEt3oEVx9QavZHkazE T7E654OJ652ldjsrQ/71zciG8OP3QqPiwV8WmAXqyKmLiPovWAtluoeypCTK2nFI jxXAqtq7+5gTmBSgaY61syX1uLDHdwHpx8H8lDO6NyoYXUFFAYOM7Nll8Nn6W3kf 8IT6lEsWIRTYAlIJLnZO2OPLLYxZVyTHeLMpBwe+coiWAsODDWTNnXKHf5ntHojM VYCoyDWU3abKz/9tb5y6lpzmXmBwuCc5VqoASMkeFBYjR4+1DTXXTv4MHZKPUA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:58:53 2026 by rpki-client